Behavioral task
behavioral1
Sample
aa8afa8f36da9543e143c392962f7684_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa8afa8f36da9543e143c392962f7684_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa8afa8f36da9543e143c392962f7684_JaffaCakes118
-
Size
144KB
-
MD5
aa8afa8f36da9543e143c392962f7684
-
SHA1
43b2cf52c0671d9f1d393fc519c07cb2ef4b0f02
-
SHA256
c5cd472b829c614c4c0ffd36ea083829cc6762f5efd65afe9fbd2ae5f11c2e58
-
SHA512
e4d6f3d888a54f0e711307beb127b066dc5401a3235fbd7933edc952c240fd55e1591842155f74900e943f1b01d95b8d0ae7586b6dddcaff25edd2e02df65e3b
-
SSDEEP
3072:6B7jZhyZJZ1+5z/V+1cY7J1jSJQolyNz+xez:6RjZhysz/o1ntUe
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa8afa8f36da9543e143c392962f7684_JaffaCakes118
Files
-
aa8afa8f36da9543e143c392962f7684_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE